Privacy Policy

Draft privacy policy — lawyer review required before public launch.

Last updated: June 2, 2026

1. Who we are

Tutor Factory provides parent-controlled AI tutoring for children. Parents or legal guardians create and manage accounts; children access tutoring through parent-created credentials. This Privacy Policy explains what we collect, how we use it, and the choices parents have. It works alongside our full Legal & Privacy Agreement and our Children's Privacy Notice.

2. Information we collect

Parent account information: name, email address, password hash, login/session data, and account settings.
Child profile information: nickname or preferred first name, grade level, subjects, language, parent-provided learning notes, optional school/curriculum context, and kid login credentials.
Tutoring information: chat messages, tutor responses, session history, homework uploads, progress notes, and related metadata.
Operational information: consent records, audit events, security logs, usage counters, and device/browser/IP metadata.
Billing information: processed by Stripe. We do not store full card numbers, and billing does not receive child tutoring content.

3. How we use information

To create and manage parent accounts, child profiles, and tutoring sessions.
To personalize tutoring to the child's grade, subjects, and learning style.
To generate AI tutor responses and explain schoolwork.
To show parents session history, progress, and data controls.
To operate, secure, debug, support, and improve the service, and to comply with law.

4. AI providers

We use configured third-party AI providers (such as Anthropic Claude or OpenAI) to generate tutor responses, sending only the minimum tutoring context needed. We aim to use provider settings that prevent customer content from being used to train provider models where available. AI responses can be incorrect; parents should supervise use. See the subprocessor list for current vendors.

5. How we share information

We share information only with service providers needed to run Tutor Factory (hosting, storage, database, AI response generation, billing, security, support), and only as needed. We do not sell child data, run behaviorally targeted ads to children, or make child profiles public. We may disclose information to comply with law or lawful requests.

6. Security

We use reasonable safeguards including hashed passwords and kid PINs, signed sessions with expiry, tenant-scoped access controls, TLS for database connections in production, and audit logging with sensitive-field redaction. No system is perfectly secure.

7. Data retention and deletion

We keep data only as long as needed for tutoring, account management, security, support, and legal compliance. Parents can export or permanently delete child data and the parent account from the dashboard at any time.

8. Parent rights and choices

Parents can review child profiles and sessions, export child data, permanently delete data, revoke consent, or delete the account from the dashboard, or by contacting privacy@tutorfactory.ai. Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA.

9. Children's privacy (COPPA)

Tutor Factory is intended to be used by children only under the control of a consenting parent or guardian. We obtain verifiable parental consent before collecting a child's personal information and follow data-minimization practices. For full detail, see our Children's Privacy Notice.

10. Changes

We may update this policy as Tutor Factory changes. For material changes involving child data, we will notify parents and may require updated consent.

11. Contact

Privacy requests: privacy@tutorfactory.ai